This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
File:                     mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json)
Hash identifier:          f3qI+SYIl3mnhkOhmZIsAEWExzvhHFTP4jFLbVXd51A=
Subject key identifier:   EA:38:98:1F:9A:6F:F5:30:B6:4D:D2:D7:46:D3:39:7B:57:B6:A4:8E
Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48
Certificate issuer:       /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
Manifest number:          7F
Signing time:             Sat 27 Dec 2025 05:33:09 +0000
Manifest this update:     Sat 27 Dec 2025 05:33:08 +0000
Manifest next update:     Sat 03 Jan 2026 05:33:08 +0000
Files and hashes:         1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: l8TDOI/++42PnT71fUcy7uQqfZJWdu12NCPBOu27p24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl
                          rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 05:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748
        Validity
            Not Before: Dec 27 05:33:08 2025 GMT
            Not After : Jan  3 05:33:08 2026 GMT
        Subject: CN=694f6f94-e004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:cb:0d:fd:7f:dd:93:df:fa:b6:d1:cf:29:
                    09:f5:7c:86:1a:c2:0d:6e:26:8d:05:e6:8a:d9:df:
                    e9:5c:e6:4b:18:09:53:2f:ed:c8:25:2e:36:c6:7d:
                    7d:9a:07:81:bc:ed:e3:95:be:dd:81:06:8a:f7:21:
                    bc:d0:28:be:32:d7:eb:1e:e0:36:e0:0b:e7:ee:6c:
                    44:21:a6:ac:af:fb:78:1a:e3:a6:e1:0b:2e:9b:ac:
                    d5:35:d0:9f:ec:69:e3:7c:36:a8:2e:30:c1:f7:7b:
                    56:b9:da:4d:06:8e:a4:52:ff:9c:d1:44:17:49:71:
                    40:b8:9c:15:ce:47:cb:85:b0:61:ec:91:ba:3f:28:
                    98:80:4e:dc:fa:55:15:46:65:09:02:2c:2a:18:f2:
                    65:c2:b0:70:f5:ae:e8:5c:4c:97:fb:36:3a:46:df:
                    c4:88:ae:2a:50:fa:56:a7:e5:d7:ae:6a:52:af:57:
                    5d:10:1a:d0:b8:82:3f:45:1f:66:9e:a1:5f:4a:bd:
                    d9:6c:e5:1b:1e:12:ad:1b:cb:dd:58:2f:81:19:56:
                    7d:82:94:be:4a:29:fe:5a:da:be:2e:e0:de:f6:e2:
                    2e:fc:78:c9:a2:10:a6:ce:33:b8:60:11:f0:e9:b6:
                    22:2f:c0:62:70:88:19:0c:70:38:5b:cf:73:6f:d8:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:38:98:1F:9A:6F:F5:30:B6:4D:D2:D7:46:D3:39:7B:57:B6:A4:8E
            X509v3 Authority Key Identifier:
                keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e1:bb:2a:7a:ae:d4:21:82:73:d8:9e:bd:d8:6f:e3:09:d2:
         a3:73:12:a6:93:5d:1d:77:e5:a4:af:d2:46:77:21:c4:10:ad:
         db:35:69:db:e5:24:1b:30:fa:a8:80:3c:eb:3f:ef:67:c5:09:
         d2:3e:a9:55:97:e3:87:1e:ce:f8:ff:16:e8:59:97:b9:0c:5a:
         17:aa:e1:2e:d3:7e:d7:15:53:9c:5b:f7:37:48:67:95:0f:9b:
         65:de:4c:61:38:2e:2e:9e:93:9d:52:5c:3f:c3:2d:00:b1:df:
         32:fa:17:8e:e8:d6:35:88:e4:04:8a:95:66:3a:b5:4e:cb:21:
         58:35:27:1a:08:26:40:a1:5b:32:6f:8b:60:68:06:df:88:50:
         09:33:90:4f:b9:ee:df:af:9b:2c:7b:f2:ce:34:19:a0:66:80:
         9a:6f:25:fa:de:29:7f:4b:96:46:9b:12:de:d3:60:28:4c:6b:
         4c:b5:79:be:7b:83:f2:e2:cf:f7:05:fd:85:ee:b1:a0:bb:5b:
         ea:cb:74:dd:e9:c3:c3:a9:2d:3d:c9:89:b2:e1:43:ad:65:31:
         89:cb:a6:2d:89:0f:c4:a1:33:c7:b4:40:59:76:dd:77:03:fc:
         86:c8:d2:b1:61:3b:79:0a:d5:2e:65:68:f4:ca:9f:b2:f6:be:
         9a:e1:ca:7c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RTY4QjExMC8GA1UEBRMoOUFENEM4MDUzMjhDRURDRjUxOTAzNDA0ODk2NDc0RDZE
RTQ4Njc0ODAeFw0yNTEyMjcwNTMzMDhaFw0yNjAxMDMwNTMzMDhaMBgxFjAUBgNV
BAMMDTY5NGY2Zjk0LWUwMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQqssN/X/dk9/6ttHPKQn1fIYawg1uJo0F5orZ3+lc5ksYCVMv7cglLjbGfX2a
B4G87eOVvt2BBor3IbzQKL4y1+se4DbgC+fubEQhpqyv+3ga46bhCy6brNU10J/s
aeN8NqguMMH3e1a52k0GjqRS/5zRRBdJcUC4nBXOR8uFsGHskbo/KJiATtz6VRVG
ZQkCLCoY8mXCsHD1ruhcTJf7NjpG38SIripQ+lan5deualKvV10QGtC4gj9FH2ae
oV9Kvdls5RseEq0by91YL4EZVn2ClL5KKf5a2r4u4N724i78eMmiEKbOM7hgEfDp
tiIvwGJwiBkMcDhbz3Nv2EA/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6jiYH5pv
9TC2TdLXRtM5e1e2pI4wHwYDVR0jBBgwFoAUmtTIBTKM7c9RkDQEiWR01t5IZ0gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFNjhCLzE2QTkwQzQ0MUNG
MDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5UmtEUUVpV1IwMXQ1SVow
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbXRUSUJUS003YzlSa0RRRWlXUjAxdDVJWjBnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF
NjhCLzE2QTkwQzQ0MUNGMDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5
UmtEUUVpV1IwMXQ1SVowZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFzhuyp6rtQhgnPYnr3Yb+MJ0qNzEqaTXR135aSv0kZ3IcQQrds1advl
JBsw+qiAPOs/72fFCdI+qVWX44cezvj/FuhZl7kMWheq4S7TftcVU5xb9zdIZ5UP
m2XeTGE4Li6ek51SXD/DLQCx3zL6F47o1jWI5ASKlWY6tU7LIVg1JxoIJkChWzJv
i2BoBt+IUAkzkE+57t+vmyx78s40GaBmgJpvJfreKX9LlkabEt7TYChMa0y1eb57
g/Liz/cF/YXusaC7W+rLdN3pw8OpLT3JibLhQ61lMYnLpi2JD8ShM8e0QFl23XcD
/IbI0rFhO3kK1S5laPTKn7L2vprhynw=
-----END CERTIFICATE-----
Generated at Sun Dec 28 18:52:53 2025 by rpki-client